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INVESTIGATION OF THE CROSS-SHIP COMPARISON 


MONITORING METHOD OF FAILURE DETECTION ' 

IN THE HiMAT RPRV 

James A: Wolf 
INTRODUCTION 

The highly maneuverable aircraft technology (HiMAT) 
program will provide researchers in the military, industry, 
and the National Aeronautics and Space Administration (NASA) 
a developmental tool with which to test new concepts for the 
next generation fighter aircraft. The HiMAT remotely piloted 
research vehicle (RPRV) is a subscale prototype which will 
have enhanced maneuverability (sustained 8G turn, 0.9 M, at 
7,900 m) using state-of-the-art technology (ref. 1) . 

The HiMAT RPRV has a basic design requirement that no 
single failure shall result in the loss of the vehicle (ref. 
2) . The method by which this requirement is met, with re- 
spect to failure detection in the canard, aileron, and eleva- 
tor servosy stems, is of some concern. The on-board primary 
microcomputer compares the surface position of corresponding 
right and left surfaces. This cross-ship comparison monitor- 
ing (CSCM) should detect a servosystem failure in time for 
a safe recovery. However, a failure indication for any other 

o 

reason other than a failed servosystem (nuisance trip) would 
greatly hamper the research mission. By using a computer 
model of the HiMAT CSCM technique, the sensitivity to servo- 
system differences was evaluated. It is important that the 



CSCM be evaluated to improve confidence in the performance 
and to define potential problems. This report gives a brief 
background of the HiMAT RPRV , describes the modeling of the 
servosystems and failure detection scheme, and discusses the 
possible effects of variations between servosystems. 
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actuator 

analog-to-digital converter 
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command amplifier 

hydraulic control pressure, psi 

commands 

computer 

cross-ship comparison monitoring 
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discrete 

decibel 

degree 

electrohydraulic servovalve 

feedback amplifier 

feedbacks 

full stroke 

frequency, Hz 
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acceleration of gravity, m/sec 

. -2 

actuator gam , in 
command gain, mA/V dc 
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G 5 

ram LVDT gain Vac/in 

G 6 

ram demodulator gain, Vdc/Vac 

G 7 

feedback gain, mA/Vdc 

G 11 

linkage gain , deg/in 

G v 

3 

servovalve gain, in /sec-mA 

HiMAT 

highly maneuverable aircraft 


technology 

Hz 

hertz 


current limit, mA 

I/O 

input-output 

IPCS 

integrated propulsion control system 

I T 

current threshold, mA 

k 

kth iteration 

LOOP 1 

first servosystem model 

LOOP 2 

second servosystem model 

LT 

left 

LVDT 

linear variable-differential* transformer 
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Mach number 
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' meter 

mA 

mi Hamper e 

ms 

millisecond 
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noise source 

n 

number of bits 

P 1 

hydraulic source pressure, psi 

POS 

position 

PROP 

propulsion 

R 1 

hydraulic return pressure, psi 

r l 

rate limit, in/sec 
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RPRV 


remotely piloted research vehicle 

remotely piloted vehicle 

sample rate, samples/sec 

right 

solenoid 

Laplace variable 
samples/sec 
iteration period 
time , sec 

transfer time delay 
volts , ac 
command voltage 
volts, dc 

left demodulator output signal 

right demodulator output signal 
demodulator monitor signal 
dc component of demodulator output 
amplitude of demodulator ripple signal 

ram stroke limit, in 
surface deflection, deg 
error rate, deg/sec 
commanded surface rate, deg/sec 
transfer delay error, deg 
failed surface rate, deg/sec 
full stroke deflection range, deg 
quantization error, deg 
initiation point of lock-up, deg 
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s 

sr 
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safe limit 

sample rate error, deg 
computer threshold limit 


Subscripts : 

i 

o 

k-1 


input 

output 

previous iteration 


5 



HiMAT RPRV 


A brief description of the HiMAT RPRV is given in the 
first section. The focus of the following sections is on the 
method of failure detection for the simplex servosystems which 
actuate the canard, aileron, and elevator control surfaces. 
Pertinent background information is given and some of the pot- 
ential problems discussed. 

Description 

The HiMAT RPRV is a scaled version (.44) of an advanced 
technology fighter aircraft. There are numerous state-of- 
the-art concepts implemented in the design, such as the com- 
posite structure, close-coupled canards, and wingtip fins. 
Figure 1 illustrates the dimensions of the vehicle and the 
five types of control surfaces. The following subsections 
give an overview of the HiMAT RPRV and program, and because 
the subject of this report is the failure detection in the 
simplex servosystems, these systems are discussed in depth. 

Overview . - In the primary flight mode the vehicle is 
controlled by the ground-based pilot in the cockpit of the 
Remotely Piloted Vehicle (RPV) facility (see figure 2) . This 
facility provides the pilot with conventional displays using 
downlinked data from the HiMAT RPRV. Pilot commands are pro- 
cessed in the ground-based computer, then uplinked to the on- 
board microcomputer which outputs the command signals to the 
respective control surface actuators. 

There are two on-board microcomputers in operation during 
the primary flight mode. This is the normal mode for maneuver 
and cruise research. The major functions are distributed be- 
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Aileron 







Figure 2.- Conceptual layout of RPRV operation with ground facility. 



tween the two computers. One computer is termed the primary 
computer and one is termed the back-up computer. Although 
the back-up computer has a major function in the primary flight 
mode, the term "back-up" arises because, should a failure oc- 
cur, there would be a transfer of some functions from the pri- 
mary computer to the back-up computer. Functions that are not 
taken over by the back-up computer are halted. Table 1 shows 
the division of tasks between computers. Figure 3 is a block 
diagram of the on-board computer system (ref. 1). 

If a function or element has an importance ' to the RPRV 
such that its failure would result in loss of the vehicle, it 
is defined to be a flight critical function or element. Flight 
critical functions or elements are dual redundant (i.e., on- 
board microcomputers, electrical power system, and rudder and 
elevon hydraulic systems) . 

Mission critical functions or elements are not essential 
to keeping the vehicle in flight (i.e., canards, ailerons, and 
elevators) . However, a failure of one of these functions or 
elements, would constitute an immediate end to the research 
mission and a return to base. Effective failure detection of 
the mission critical functions or elements should prevent loss 
of the vehicle. As an example, take the case of a failure in 
a canard servosystem, the failure detection routine would: 

1. Detect the failure 

2. Begin the actuator locking sequence 

3. Transfer control to the back-up computer 

The back-up system would provide emergency return home 
capability using an on-board autopilot. The flight critical 
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MODE 

PRIMARY COMPUTER 
PROCESSING TASKS 

BACK-UP COMPUTER 
PROCESSING TASKS 

Primary 

Flight 

Mode 

■ 

- primary flight sensor data 

- control surfaces 

- uplink information 

- downlink information 

- failure detection 

- integrated propulsion 
control system 

Back-up 

Flight 

Mode 

> 

- back-up control surfaces 

- back-up autopilot 

- reduced IPCS 

- sensor data 


TABLE 1 

MAJOR FUNCTIONS OF THE PRIMARY 


AND BACK-UP COMPUTERS IN THE PRIMARY AND BACK-UP CONTROL MODES 









H 

l-* 


V 





Figure 3.- Functional block diagram of the on-board computer system 




























control surfaces (elevons and rudders) would be used to con- 
trol the HiMAT RPRV back to a lakebed landing. The pilot can 
control the altitude variations, directions, and speed using 
discrete commands. The canards, ailerons, and elevators are 
hydraulically locked at a predetermined position. 

Simplex servosystems . - The ten control surfaces of the 
HiMAT RPRV are positioned using hydraulic servoactuators . The 
mission critical surfaces (canards, ailerons, and elevators) 
have a single hydraulic supply and input. This is defined to 
be a simplex servosystem. Except for the elevator, which has 
a higher force output requirement (tandem actuator) , they have 
a single actuator. This is shown in figure 4 which is a sche- 
matic of the simplex servoactuator . The control surface char- 
acteristics are shown in table 2. Notice that the canards 
can move symmetrically or antisymmetrically, but not combined. 

Uplinked pilot commands are converted from a digital sig- 
nal to an analog signal and fed to the commanded surfaces. 

The simplex servosystem is illustrated in figure 5 with a 
block diagram (ref. 3) . Table 3 gives the corresponding gain 
values. The servoamplif ier sums the command and feedback in- 
puts and supplies a proportional output current to the electro- 
hydraulic servovalve (EHSV) . The EHSV controls the fluid flow 
rate to the actuator (ref. 4) . The actuator provides the 
force output to move the control surface to the commanded 
position. The surface deflection rate is determined by the 
characteristics of the EHSV and actuator. Position feedback 
is derived from the output of the linear variable-differential 
transformer (LVDT) (ref. 5) . The iron core of the transformer 
is attached to the actuator ram (see figure 4) . The LVDT pri- 
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SOL 1 



Figure 4.- Schematic of the simplex servoactuator 





AILERONS 

CANARDS 

ELEVATORS 

Servo- 

Actuator 

type 

single input 
single actuator 

single input 
single actuator 

single input 
tandem actuator 

Surface 

deflection 

antisymmetric 

antisymmetric 

or 

symmetric 

symmetric 

Maximum 

surface 

rate 

90°/sec 

90°/sec 

90°/sec 

Location on 
the vehicle 

outboard 

wing 

surface 

forward 

control 

surface 

inboard 

wing 

surface / 


TABLE 2 

CONTROL SURFACE CHARACTERISTICS 
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Figure 5.- Block diagram of the simplex servosystem and failure detection scheme. 












Symbol 

Canard 

Aileron 

Elevator 

Units 

G v 

0.636 

0.636 

1.503 

in 3 /sec-mA 

g a 

0.909 

0.909 

0.455 

in" 2 

g 4 

6.969 

6.969 

8.621 

ihA/Vdc 

G 5 

2.919 

2.919 

2.919 

Vac/ ^ 

G 6 

3.824 

3.824 

3.824 

Vdc/ v ac 

g 7 

12.346 

12.346 

10.471 

mA/V DC 

G 11 

39.72 

39.72 

34.13 

Deg/in 

IL 

+4.0 

+ 4.0 

+4.0 

mA 

*L 

+0.503 

+0.503 

+0.870 

-0.595 

i n 

r l 

2.312 

2.312 

2.733 

in/sec 

V C 

+ 10 

+ 10 

+ 10 

V DC 

5 s 

+20 

+20 

+ 30 
-20 

Deg 

Vm 

+ 5.60 

+ 5.60 

+8. 176 

V DC 


G v - EHS V Gain 
G^ - Actuator Gain 
Gi* - Command Gain 
G 5 - Ram LVDT Gain 
Gg - Ram Demond Gain 
G 7 - Feedback Gain 
Vm - Ram LVDT Monitor 


Gn 

IL 

*L 

Rl 

V C 

6 , 


Linkage Gain 
Command Current Limit 
Ram Stroke Limit 
Ram Rate Limit 
Actuator Command 
Surface' Position 


■ 




►TED 

►TEU 


TABLE 3 

SIMPLEX SERVOSYSTEM GAINS AND SPECIFICATIONS 
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mary winding is excited by an oscillator as the actuator 
ram changes position (causing an accompanying change in the 
surface deflection) . The iron core movement causes a change 
in the amplitude of the induced voltage in the secondary wind- 
ings- This signal is demodulated and fed back to the servo- 
amplifier. The demodulated signal is also picked off- and con- 
verted to a digital signal for use in the CSCM failure detec- 
tion scheme. Command signals sent from the primary micro- 
computer and monitoring of the LVDT output occur at a rate of 
53.33 hertz (18.75 millisecond cycle time). The command in- 
put will be a series of steps. The output of the LVDT demod- 
ulator will also appear to the computer as a series of steps, 
due to the sampling effect. 

The simplex servosystem frequency response should be 
flat out to about 13 hertz under no-load conditions for move- 
ments up to thirty percent of full actuator ram stroke. The 
load frequency response specifications for displacements of up 
to ten percent full-stroke and thirty percent of maximum rate 
are listed below (ref. 3) 

Attenuation - Less than +2 or -3 dB out to 3 hertz 

Phase Shift - Less than 30 degrees out to 3 hertz 

The servosystems will be operating under loaded condi- 
tions a majority of the time. The potential for a problem in 
the CSCM exists during flight due to aerodynamic loading of 
the control surfaces. This is because there are conditions 
in the flight envelope where the loading on one surface may 
be different from the loading on the opposite surface. This 
would mean a difference in response characteristics and thus, 
a chance for an error between corresponding surface position 
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indications. The failure detection system design must take 
this into account. 

Failure Detection 

The following subsections describe the design approach 
for the CSCM failure detection scheme. A general description 
of how it works, design constraints, and. possible sources, of 
error are given. 

Design approach . - With the requirement that a single 
failure shall not result in loss of the vehicle, flight crit- 
ical elements or functions must have a failure detection tech- 
nique and back-up system. Mission critical elements or func- 
tions must have a failure detection technique that not only 
detects the failure but provides a return to stable flight 
(ref. 2) . This is why the canards, elevators and ailerons 
are designed to move to a locked position after a first fail- 
ure. 

The failure detection and corrective action must be de- 
signed to respond quickly because of the fast response of the 
actuators and the vehicle. The actuators can move the con- 
trol surfaces at a maximum rate of 90 degrees per second. 
Likewise, a failed servosystem could move the control surface 
at the maximum rate. It is possible, however, that a control 
surface could fail at the maximum rate while the surfaces are 
responding to a command signal. The resulting error rate be- 
tween corresponding surface positions would exceed 90 degrees 
per second. 

Functional description of the cross-ship comparison mon- 
itoring . - The failure detection method for the canards, ail- 
erons, and elevators uses the fact that these surfaces move 




either symmetrically or antisymmetrically. A comparison is 
made between respective right and left surface deflections. 

The on-board microcomputer monitors the comparison to deter- 
mine the integrity of the aileron, canard, and elevator con- 
trol surfaces. 

The dc voltage output, from the actuator ram LVDT demod- 
ulator, proportional to the control surface position, is con- 
verted to a digital value (ref. 6) . The microcomputer sums 
the values of each side, as in the case of the ailerons, to 
determine an error value. Because the canards move either 
antisymmetrically or symmetrically, depending on which mode 
they are in, the difference or sum of the surface positions is 
used. The error value is compared to the predetermined thres- 
hold value stored as a constant in the computer. Should the 
error value exceed the computer limit, a failure would be de- 
clared and an immediate switch to the back-up mode initiated. 

The on-board microprocessor samples and processes the 
surface position information of the ailerons, elevators, and 
canards 53.33 times a second. The LVDT demodulator output 
voltage is converted to a 12 bit digital word. Since the de- 
modulator voltage range is plus or minus 5.62 volts and the 
A/D converter is a plus or minus 10 volt type, the full A/D 
converter is not used (ref. 4) . 

A digital word representing a control surface position on 
one side is updated by the computer. Twenty-five microseconds 
later the opposite side is updated. This is done just prior 
to the output of a command signal so that any servosystem 
transients from the previous cycle will have died down. The 
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two double precision words representing corresponding surfaces 
are added or subtracted. The resulting quantity represents 
the error value between surfaces. The most significant eight 
bits are compared to the threshold constant stored in the com- 
puter. If the error value exceeds the threshold value, the 
resulting switch to back-up is initiated and the control sur- 
face lock-up sequence begins. The lock-up sequence and res- 
pective time delays are as follows : 

1. Switch relay to de-energize solenoid - 15ms 

2. De-energize locking solenoid - 20 ms 

3. Hydraulic lag before check valves seat and ram 
begins to move to the lock-up position - 15ms 

Thus, the total transfer delay before a failed actuator be- 
gins moving to the lock-up position is 50 milliseconds. For 
the case where one surface is fixed and the other is failing 
at the maximum rate of 90 degrees per second, the total trans- 
fer delay translates into an error between surfaces of 4.5 
degrees. Therefore, the threshold value should be selected 
such that an additional error of 4.5 degrees would not ex- 
ceed the safe limit. 

Design Constraints on the cross-ship comparison monitor- 
ing technique . - The error between ailerons, canards, or ele- 
vators allowed before an unrecoverable flight condition occurs 
is seven degrees, ten degrees, and seven degrees, respectively. 
These values were determined based on simulation studies and 
on analysis of the effects for the case of one control surface 
fixed and the other failing hardover (90 degrees per second) . 
However, it is possible for a failure to occur during posi- 
tioning of the surfaces . This could result in an error rate 
of greater than 90 degrees per second. 
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There is a design compromise between the allowance of 
false failure indications, and the risk of losing the vehicle 
in the event a failure goes undetected. False failure indica- 
tions, termed "nuisance trips", are very detrimental to the 
research mission because of considerable overhead involved in 
a single mission and the delays involved in troubleshooting 
the cause of the nuisance trip. Determination of -a computer 
threshold value involves design trade-offs. 

Two cases will be considered and the computer threshold 
values that are appropriate determined. The first case as- 
sumes the good control surface is fixed at some position when 
the opposite surface fails. The maximum error allowed before 
initiation of the lock-up sequence (0 ) is the difference be- 

X / 

tween the safe limit allowance ( 0 ) and the error accumulated 
due to the total transfer delay (e^) . 

e d = ^t x 0 

0 £ = 0 S ~ 0 d 

To assure that the lock-up sequence begins some time before 
the error reaches 0^, the worst case should be assumed. This 
means that the quantization error due to the analog-to-digital 
conversion is at the maximum and the sampling instant is the 
one least desirable. The quantization error is equal to the 
amount of control surface deflection represented by the least 
significant bit. For the CSCM technique, the comparison error 
value is represented by an eight bit digital word. The quan- 
tization error in degrees is therefore, 


6 q ‘ 9 fs /2 “ 
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where, 9 fg = full surface deflection range 

n = number of bits used in the comparison 
to the threshold value 

The least desirable sampling instant is at a point immediately 
before the error value reaches the computer threshold limit. 
The computer will not detect a failure until the next sample 
period. Therefore, the error accumulation in one sample per- 
iod (1/R g where R s is the sample rate) at the specified error 
rate (6) is 

e sr 0 / R s 

Thus, the computer threshold limit (0-f-) together with the 
quantization (6 a ) and sample rate error (8 sr ) should be less 
than the maximum error allowed before initiation of the lock- 
up sequence (0^) or: 

9 t “ - e sr - e q 

Figure 6 illustrates the error rate between surfaces , the 
worst-case quantization and sample rate error, and the re- 
quired threshold limit. 

The second case is that in which the good control surface 
is not fixed, but moving in such a way so as to produce a 
greater error rate than 90 degrees per second. The error rate 
(0) is now equal to the sum of the failed surface rate (0^) 
and the commanded surface rate (0 C ) , 



The computer threshold limit is calculated as described in the 
first case. Table 4 gives the computer threshold limit values 
for the canards, ailerons, and elevators for the 90 degrees 
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ERROR BETWEEN SURFRCES 



Ficrure 6.- Determination of the computer threshold limit. 



ERROR RATE 
(DEGREES/SEC) 


INITIATION 
POINT OF 
LOCK-UP 
0 , 


TRANSFER 
DELAY ERROR 
(DEGREES) 


SAMPLE RATE 
ERROR 
(DEGREES) 


QUANTIZATION 

ERROR 

(DEGREES) 


SAFE LIMIT 
(DEGREES) 


COMPUTER 

THRESHOLD 

LIMIT 

(DEGREES) 


CANARDS 

90 

95 

5.5 

5.25 

4.50 

4.75 

1.69 

1.78 

.16 

.16 

10 

10 

3.65 

3.31 

— 


ELEVATORS 


AILERONS 



.20 .20 .16 



TABLE 4 

SUMMARY OF PARAMETERS USED IN 


DETERMINING COMPUTER THRESHOLD LIMITS 
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per second error rate case and for a 95 degrees per second 
error rate, illustrating the second case. It is evident that 
the calculated computer threshold limit for the elevators and 
ailerons is cause for- concern. The total transfer delay ac- 
counts for a considerable amount of error. A reduction in 
this delay would allow the computer threshold limit "to be in- 
creased. This might be accomplished by using a different 
switching relay to de-energize the locking solenoid. A re- 
duction in the 20 millisecond de-energizing time to 4 milli- 
seconds may be possible with a resulting increase in the nec- 
essary computer threshold limit (e-t) of 1.44 degrees. The 
availablity of the faster switching relay is not likely to be 
a problem. 

The sample rate error (8 sr ) is fixed because of con- 
straints on the on-board computer loading. Since the compu- 
tational load is near the maximum, any additional increase 
in sampling is not feasible. The quantization error (6q) 
could be reduced if the full range of the analog-to-digital 
converter were used and the full 12 bits instead of the most 
significant 8 bits were used. This would increase the 
computational loading to some degree, however, and the 
elimination of this error may not justify the additional load 
ing. The advantage of increasing the threshold limit is the 
buffering effect created. Errors due to nonidentical unfailed 
servosystems are less likely to be a source of nuisance trips 
if there is a sufficient buffer band. 

Possible sources of comparison errors in unfailed servo - 
systems . - Any characteristic which is not identical between 
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corresponding servosys terns is a source of comparison error. 

For example, the gains of each component in one servosystem 
may differ from those of the other servosystem due to manu- 
facturing tolerances. In flight, the servosystem differences 
might be 1 caused by aerodynamic loading. Electrical properties 
in corresponding components will be different. These types 
of differences give rise to error sources such as EHVS thres- 
hold error, servosystem hysteresis error and rate limit error. 

LVDT demodulator ripple error . - Each servosystem LVDT 
demodulator has a ripple signal superimposed on it. These 
signals are from a single 1800 hertz oscillator and therefore, 
.t.hey will be in phase. As described earlier, the demodulator 
output sampling for corresponding surfaces occurs twenty-five 
microseconds apart. 

Each right and left demodulator output is equal to the 
sum of the dc voltage, V c , and the approximately sinusoidal 
ripple voltage, V r sin ( 360ft) . The frequency, f, is the oscil- 
lator frequency and the ripple amplitude, V R , is equal to 
0.071 | V 0 j (ref. 3). The sampling time difference, with re- 
spect to the error between demodulator outputs , can be thought 
of as a phase difference between corresponding right and left 
demodulator output signals, Vp R and V DL . Therefore, the right 
and left demodulator outputs are, 

V DL = v o + V R sin( 360ft) (1) 

V DR = + V R sin (360f (t + 2.5 x 10" 5 ) ( 2a ) 

or, 

V DR = V 0 + V R sin (360ft + 16.2) (2b) 

Two types of errors due to the ripple signal could occur. 



One type would be characteristic of the symmetrically moving 
surfaces and the other would be characteristic of the antisym- 
metrically moving surfaces. 

Taking the case of the symmetrically moving surfaces, the 
difference of the right and left demodulator outputs would be 
determined in the on-board microcomputer. All other things 
being equal (neglecting the analog-to-digital conversion ef- 
fects) , the error value determined would be the difference in 
the two ripple signal equations,! and 2b. 


ripple error = Vr 


sin (360ft) 


sin(360ft + 16.2) 


(3) 


Figure 7a illustrates the error value for a plus 10 de- 
gree surface deflection. 

For the case of the antisymmetrically moving surfaces, 
the right and left outputs have opposite polarity and so they 
would be added to produce an error signal. The error value 
would be the sum of equations 1 and 2b. 


ripple error = Vr 


sin(360ft) + sin(360ft + 16.2) 


(4) 


Figure 7b illustrates the error value for a plus and minus 10 
degree surface deflection. 

The worst-case ripple error for symmetrically deflected 
surfaces, deflected 20 degrees, would be significant. The 
worst-case sampling instant would occur at a point in time 
when the argument of the sine wave is at minus 8.1 degrees. 
After a 25 microsecond delay, when the argument of the sine 
wave is plus 8.1 degrees, the opposite position output would be 
sampled. According to equation 3, the ripple error magnitude 
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would be approximately 0.11 volts which corresponds to a false 
error betwe'en surface positions of approximately 0 . 4 degrees . 
This would be a potential source of nuisance trips because of 
the comparable value to the computer threshold limit for sym- 
metrically moving surfaces. A possible solution to this con- 
dition would be to filter the LVDT demodulator output with a 
low-pass filter to attenuate the ripple signal. 

The worst-case ripple error for antisymmetrically moving 
surfaces, deflected 20 degrees, would be more severe. The 
worst-case sampling is at a point. in time when the first sam- 
ple is taken just before the ripple signal reaches a peak val- 
ue. The first position output would be sampled when the sine 
wave argument is 81.8 degrees. After the cycle delay, the 
opposite position output would be sampled, and again the 
argument would be 81.8 degrees. Using equation 4 the ripple 
error magnitude would be’ approximately 0.78 volts. This cor- 
responds to a false indication of approximately 2.8 degrees, 
an excessive error. Again, a possible solution might be to 
filter the LVDT demodulator with a low-pass filter to attenu- 
ate the ripple signal, and thus, the error. Filtering, how- 
ever, would involve additional hardware and analysis. This 
presents a problem because of an already compacted hardware 
arrangement. 

For small surface deflections (less than one degree) the 
quantization error masks the ripple error for both symmetric 
and antisymmetric surfaces. Increasing deflections cause the 
ripple error for antisymmetric surfaces to dominate. The rip- 
ple error for symmetric surfaces is not a factor for a deflec- 



tion under 8.0 degrees, due to the quantization error. 

The effect of the ripple error in both cases would be to 
increase the probability of nuisance trips. For large sur- 
face deflections and computer threshold values as calculated, 
it is almost certain that a nuisance trip would occur. Filter- 
ing the demodulator output appears to be the most effective 
solution to this problem. 

COMPUTER MODEL 

The advantages of using a computer program to model the 
CSCM technique are listed below: 

o Straightforward implementation of nonlinear as 

well as linear characteristics 
o Amount of error that each component variation con- 

tributes is readily identified 
o Servosystem changes can be made quickly and easily 

o Data can be easily formated for automatic plotting 

The formulation of the FORTRAN program used for evaluat- 
ing the CSCM technique is discussed. The initial linear mod- 
el is described after which the non-linear affects are added 
and the resulting model described. 

Linear Model 

A linear model was formulated to which other elements 
were included to more closely represent the actual servosystem. 
Once the servosystem was modeled the CSCM technique was repre- 
sented using two servosystem models. Ease of including non- 
linear blocks was a design goal for the linear model. A 
brief description of the servosystem and the characteristics 
of the components are given. Simplifying assumptions and 
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verification of the model performance is described. 

Description . - The objective, when modeling the servo- 
system and subsequently the CSCM technique for failure de- 
tection, was to match the model behavior as closely as pos- 
sible to the physical system behavior, within the anticipated 
operating range. For the physical system with command signal 
frequencies of up to 13 hertz, the unloaded servosystem re- 
sponse was very near that of an ideal low-pass filter (ref. 3) . 
The servosystem actuator dynamics contribute a closed-loop 
pole at 13 hertz. The other servosystem elements have dynamic 
response characteristics as follows (ref. 3) : 


Servoamplifier 

(for signals up to 
20% of rated output 
current) 


EHSV 


V 


LVDT Demodulator 


f 628 ^ 

Vs + 628/ 


( 580 ^ f 5406 N l 

\s + 580 / \ s + 5406/ 

G ( 628 

6 \s + 


628 j 

The model of the servosystem was structured such that 
each mathematical expression in the code corresponded to a 
component of the actual servosystem. Initially the inputs and 
outputs were zero. One iteration of the code corresponded to 
one time increment and generated one set of output values . A 
flowchart of the model is shown in figure 8. For the first 
iteration the feedback value was assumed to be zero. The in- 
put to the EHSV block was then equal to just the command am- 
plifier output. As outputs were calculated, the input to the 
next block was set equal to the output of the preceding block. 
The loop was closed after the first iteration because the 
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Figure 8.- Flowchart of the servosystem 
computer model and CSCM 
scheme . 
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error signal value (the input to the EHSV for the next itera- 
tion) was the difference between the command amplifier output 
and the feedback amplifier output (see figure 5) . In the 
physical system the LVDT demodulator is reverse polarity with 
respect to the command signal. The FORTRAN model of the -LVDT 
demodulator output had the same polarity as the command sig- 
nal for convenient analysis. 

The modeling of the CSCM technique was made up of two 
servosystem models to represent the canard control surfaces. 
This was designed to allow one servosystem model to have nom- 
inal gains according to table 3 and the other to be varied, 
for sensitivity test purposes. The resulting error between 
the two models was of interest in determining the effects of 
disproportionate servosystems . The same command value was ap- 
plied to each servosystem. The output values of each LVDT de- 
modulator block were converted to the equivalent control sur- 
face deflection. The first servosystem model corresponded to 
the right control surface. The error value between surfaces 
was the difference of the left surface from the right surface, 
where the left surface corresponded to the second model. The 
appendix contains a computer listing of the FORTRAN program. 
Figure 5 shows a block diagram of the servosystem and CSCM 
method. 

Simplifying assumptions . - A reasonable assumption con- 
cerning the frequency of the command input signal was that it 
would not be higher than 15 hertz. It follows that the EHSV, 
the LVDT and LVDT demodulator, and servoamplif ier dynamics 
would cause negligible attenuation and phase shift. These 
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elements were modeled as pure gain elements. The actuator was 
conveniently modeled as an integrator and implemented in the 
digital program using the bilinear transformation expression 
(ref. 7,8). For the Kth iteration, 

output K = output K _^ + T/2 (input K + input K _^) 

where T is the sample period, that is, the time between itera- 
tions and was nominally 0.2 milliseconds, 5000 hertz itera- 
tion rate. To obtain sufficient accuracy using the bilinear 
transformation expression for the integrator, the sample fre- 
quency was set much higher than the first-order pole of the 
model (greater by a factor of ten or more) . The past input 
and output values were updated with each iteration: 

Verification . - The CONTROL digital computer program 
(ref. 9), a program for analyzing linear continuous systems, 
was used to verify that the discrete model was an accurate 
representation of the linear first-order model of the simplex 
servosystem. Time history responses, of the control model and 
the discrete model, were compared. There was no detectable 
difference. The CSCM model was also verified by using two 
servosystem models in each program to simulate the CSCM. In 
both programs the difference of one servosystem monitor output 
from the other was computed to give an error value. The mod- 
els corresponding to the right servosystem in each program had 
equal gains and the models corresponding to the left servo- 
systems had equal gains but the right and left sides were un- 
equal. As can be seen in figures 9a and 9b, for a step input 
and a sine wave input, the discrete model compares very close- 
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ly to the linear continuous model. 

Non-linear Model 

The following subsection describes the non-linearities 
that were added to the linear model. T The origin, of these non- 
linearities and the likelihood of any contribution to the 
error between unfailed actuators is discussed. The assump- 
tions that were made in implementing these characteristics 
and the verification procedures are given. 

•' Description . - The non-linearities that were added to the 
model are among the more common ones associated with servo- 
systems. The non-linear characteristics added were: 
o EHSV current limiting 

o EHSV threshold current 

o Actuator ram position limit 

o Total servosystem hysteresis 

The EHSV provides the electrical-to-hydraulic interface 
which controls the" source of fluid power to the hydraulic act- 
uator. The EHSV rated current range changes the fluid flow, 
to the actuator, from maximum extension control flow to maxi- 
mum retraction control flow. The servoamplif ier supplies cur- 
rent to the EHSV within the specified range, plus or minus 4 
milliampheres (ref. 3) 

The EHSV threshold current non-linearity is essentially 
a characteristic produced by the static friction of the slid- 
ing valve. The. specified threshold value was determined by 
the manufacturer during quality assurance tests. The current 
increment required to reverse the EHSV from a condition of in- 
creasing output was measured. The current was changed at a 
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a rate below that at which dynamic effects were important. 

The actuator ram position limit is the maximum extension 
or retraction distance from the null position. For the CSCM 
model the full stroke (F.S.) of the actuator ram was approxi- 
mately 2.56 cm (ref. 3). The position limits were plus and 
minus one half of this amount. 

The actuator ram rate limit is the rate at which the ram 
can extend or retract under no-load conditions with maximum 
control flow from the EHSV. The rate limit is dependent on 
the properties of the other components in the loop. A change 
in loop gain may affect the rate limit as will a change in the 
maximum control flow from the EHSV. The current limit imple- 
mentation was in effect a rate limit since a decrease in the 
current maximum output would decrease the control flow maxi- 
mum output. The actuator ram rate limit used was 5.87 cm per 
second (ref. 3) . 

The total servosystem hysteresis is defined as the maxi- 
mum difference in command voltages required to produce the 
same actuator ram position during a single cycling of the com- 
mand voltage. This cycling is done below the rate at which 
dynamic effects are important. The hysteresis non-linear 
characteristicis produced by the combined effects of the EHSV 
threshold and electromagnetic characteristics, and the static 
friction of the actuator ram. 

Simplifying assumptions . - There were some general as- 
sumptions made to simplify the implementation of the non 
linear discrete model. Although a non-linearity in the phy- 
sical system may be a function of several variables, in the 
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discrete model each non-linearity was assumed to .be only a 
function of the input to that non-linear block. The linear 
representation of each servosystem element was retained. For 
example, in implementing the EHSV current limit characteristic, 
the EHSV input value was tested to determine if it was great- 
er than or less than the limit values. If so, it was set 
equal to the appropriate limit value. The expression for 
EHSV behavior was not affected, it remained a pure gain ele- 
ment. 

It was assumed that the non-linearities would be closely 
approximated as ideal non-linearities. For example, the 
total hysteresis value, as measured, might not be uniform for 
the full stroke of the actuator ram in the physical system. 

It was assumed to be uniform for the non-linear implementation 
in the discrete model. 

It was also assumed, for the discrete model, that because 
the EHSV threshold produces a hysteresis non-linearity in the 
closed-loop response, the total hysteresis could be modeled 
by adjusting the threshold value. The position limits were 
included in the model. A difference in the position limits 
would produce an error between surfaces only at the maximum 
deflections. This effect was not investigated. A difference 
in the current limits of the EHSV would amount to a difference 
in the rate limit, which was investigated. 

Verification . - The current limiter, and position and 
rate limiters are shown in figures 10a and 10b, respectively. 
The 10 degree command sine wave is shown in figure 10a along 
with the resulting input current waveform of the EHSV which 
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Fi jure 10a.- Output of the current limiter 
block for a 10-degree sine wave command. 
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Figure 10b. Actuator response to a 25 degree step 
command illustrating rate and position limits. 
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was limited to plus or minus 4 milliamperes . Figure 10b 
shows the ram position and the maximum positive ram extension 
of 1.28 centimeters and also the maximum extension rate of 
5.87 centimeters per second for a 25 degree step command. The 
threshold non-linearity is shown in figure 11 and hysteresis 
non-linearity, resulting from the closed loop response, is shown 
in figure 12. The horizontal axis is the input and the ver- 
tical axis is the output of the non-linear block. The non 
linear block diagram is shown in figure 13. The inputs label- 
ed Nj and N 2 are points where noise was introduced into the 
model. 

COMPUTER ANALYSIS 

The objectives and procedures for the parameter sensitiv- 
ity test of the CSCM technique are given. This test uses the 
nonr linear digital model described in the preceding section. 

Objectives 

There were five main objectives in testing the sensitiv- 
ity of various parameters in the CSCM technique 

1. Determine the sensitivity of the error between 
servosystem LVDT demodulator outputs to variations in the 
values of the threshold and rate limit non-linearities. 

2. Determine the effect of loop gain differences on 
the error between servosystems. 

3. Investigate the effect typical system noise may 
have on the error between servosystems. 

4. Investigate the demodulator ripple, sampling time 
difference, and digital-to-analog and analog-to-digital con- 
version errors. 
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Figure 13. - Block diagram of the servosystem model 
and CSCM scheme including nonlinear blocks. 




















5. Determine the total effect on the error value for 
two servosystems with reasonable differences in characteris- 
tics. 

Using the data from the tests a judgement was made as to 
the impact of nonidentical servosystems on the performance of 
the CSCM failure detection technique. Potential solutions to 
problems that were evident were then formulated. 

Test Procedure 

The test objectives were met by varying the parameters of 
interest and collecting data on the response of the CSCM error ■ 
value. The input command for each case was a six degree step 
command, a somewhat severe command but appropriate for the 
test. 

Loop gain variations . - In order to study the effect of 
loop gain differences the gains of the left servosystem ele- 
ments were set to the nominal values (see table 3) . The right 
servosystem loop gain was theh changed for each case by chang- 
ing the dc gain of the actuator. The difference between the 
two servosystem gains would most likely be less than six per- 
cent. This is because the design specifications cite an over- 
all system gain accuracy of plus or minus three precent for 
the test. The right servosystem loop gain was varied from 
80 percent to 120 percent of the nominal value in five percent 
increments. The error magnitude, in degrees, for a step input 
is shown in figure 14. Notice that for the higher than nomin- 
al loop gains the error was zero for a time. This is due to 
the fact that the rate limiter was holding both actuator rates 
equal. Only when the actuators came off the rate limit was 
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Figure 14.- Error curves resulting from 
loop gain differences . 







an error seen. For cases where the loop gain of the right 
servosystem is less . than the nominal value, the rate limit is 
less than, nominal. Therefore, the error varies according to 
the difference between rate limits. 

Rate limit variations . - The rate limit of the left 
servosystem model was held at the nominal specification while 
the right servosystem model had a rate limit variation from 
90 percent to 110 percent in two percent increments. For one 
case, the left servosystem was set at 110 percent while the 
right servosystem was set at 90 percent of the nominal spec- 
ifications. The eleven cases are shown in figure 15a. The 
current limiter was excluded to allow excursions of the rate 
limit beyond that fixed by the current limiter. When the cur- 
rent limiter was included there was no error. The right 
servosystem rate limit was set higher because the EHSV cur- 
rent limit was already limiting the rate to the nominal value 
in both servosystems . Figure 15b illustrates the result of 
the same test cases with the current limits included. 

EHSV threshold and total hysteresis . - The design spec- 
ifications for the simplex servosystems give an EHSV thres- 
hold value and a total servosystem hysteresis value, 0.7 per- 
cent and 0.15 percent of full stroke (F.S.), respectively. In 
the servosystem model, the EHSV threshold non-linearity im- 
plementation gives the hysteresis characteristic in the 
closed-loop response. One set of cases was run using the 
EHSV threshold specification for the left servosystem and vary- 
ing the threshold value of the right servosystem in integral 
amounts up to ten times the nominal value. This set of cases 
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is shown in figure 16a- Again, there was no error until both 
servosystem models came off the rate limiters. 

In order to model the total hysteresis, the threshold 
value of the EHSV was set to give the nominal hysteresis value 
for the left servosystem while the right servosystem was 
varied in integral amounts up to ten times the nominal value. 
Figure 16b shows the test results for a six degree step input. 

Servosystem noise . - The effect of various types of noise 
on the error between servosystem models was investigated using 
a software pseudo-random noise generator. The noise signal 
was introduced at the EHSV input and at the demodulator out- 
put. Two cases using a different level of noise in each case 
were run for both noise input points. For the EHSV input, the 
noise level in each case was 0.1 percent of the maximum signal 
input (4.0 mA') and 3.0 percent of the maximum signal input. 
This is shown in figure 17a and 17b, respectively. For the 
demodulator output, the noise level in each case was 0.1 per- 
cent and 3.0 percent of the maximum demodulator output (5.61 
Vdc) as shown in figure 17c, and 17d, respectively. The sam- 
pled values of the output were shown in these cases illustrat- 
ing the values the on-board computer would be operating on. 

Combined effects . - The combined effects of the previous 
sources of differences between servosy stems were investigated. 
The left servosystem was set to the nominal specif ications and 
the right servosystem characteristics were as shown in table 
5. The resulting test plots are shown in Figure 18a-d. 

Ripple error and sampling time differences . - For these 
test cases the demodulator ripple is added to the dc voltage 
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(c) Noise signal of 0.1% introduced at the demodulator input, 

Figure 17.- Continued. 
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(d) Noise signal of 3.0% introduced at the demodulator output. 

Figure 17.- Concluded. 
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Loop gain 

Rate limit 

Threshold 

Hysteresis 

EHSV input noise 
demodulator 

Output noise 


RIGHT SERVOSYSTEM 

CASE 1 

CASE 2 

CASE 3 

CASE 4 

97% 

99% 

97% 

99% 

95% 

99% 

95% 

99% 

95% 

99% 

95% 

99% 

95% 

99% 

95% 

99% 

2% 

1% 

- 


2% 

1% 

- 



LEFT SERVOS Y STEM 


CASE 1-4 


Loop gain 

Rate limit 

Threshold 

Hysteresis 

EHSV input noise 

Demodulator output noise 


80 

5.87 cm/sec 
0.7% of F .S . 
0.04% of F.S 


TABLE 5 

SUMMARY OF SERVOSYSTEM CONDITIONS FOR 
INVESTIGATION OF COMBINED SERVOSYSTEM DIFFERENCES 


58 

















LT,DEG RT .DEG- COMMAND >DEG- ERROR .DEG- 


- 2.00 


20.00 


10.00 


0 .00 -r= h i 1 1 1 1 

0.00 0.02 0.04 0.06 0.08 0.10 0.12 

TIME HISTORY, SEC 

(a) Servosystem conditions as specified in case 1 of table 5 
Figure 18.- Surface responses and monitor error for 

a step command. 
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(c) Servosystem conditions as specified in case 3 of table 5. 

Figure 18.- Continued. 
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output according to equations 1. To simulate this sampling 
time difference .in the CSCM model, the ripple signals for each 
side are set out of phase by 16.2 degrees. The input command 
signal is a series of step inputs held to the command input 
rate limit of 100 degrees per second and with a final value of 
six degrees. The demodulator output samples are shown along 
with the actual waveform. The symmetric case is shown in fig- 
ure 19a and the antisymmetric case is shown in figure 19b. 

The ripple waveform shown has a much lower frequency (ninth 
harmonic) because of the iteration rate (1000 sps) . It serves 
to illustrate the amplitude, however. 

COMPUTER ANALYSIS RESULTS AND DISCUSSION 

The computer analysis provided information as to the rela- 
tive contribution of the possible error sources (loop gain, 
rate limit, threshold and hysteresis, system noise, and demod- 
ulator ripple) to the amount of detected error between servo- 
system position monitors. The error magnitudes, for test cases 
with varying differences between right and left servosystems 
(as shown in table 5) , provides an estimate of the integrity of 
the CSCM failure detection method. That is, the likelihood of 
nuisance trips, for the computer threshold limits of table 4, 
may be hypothesized. 

The loop gain variations shown in figure 14 indicate that 
the worst- case difference of six percent would contribute a 
peak value of approximately 0.3 degrees to the error. For the 
canard threshold limit of 3.65 degrees (assuming a maximum of 
90 degrees per second error rate) , this error would not contri- 
bute significantly to the likelihood of a nuisance trip. For 
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{b} Ripple signal added to the demodulator 
output of antisymmetrically moving surfaces 

Figure 19.- Concluded. 


the aileron and elevator threshold limits of 0.65 and 0.69 de- 
grees., respectively, a 0.3 degree contribution to the error 
value would increase the likelihood of a nuisance trip consid- 
erably. The loop gains should be matched as closely as possible 
to minimize this error contribution. 

A difference between servosystem rate limits has the same 
effect, on the error value, as does differences in loop gains. 
Figure 15a and 15b illustrate the type of error response for a 
six degree step command. The maximum rate is dependent on the 
loading of the hydraulic actuator, in the physical system. For 
asymmetric aerodynamic loading on the control surfaces, the 
computer analysis indicates that the error rate varies accord- 
ing to the difference between right and left surface deflection 
rates. Thus, for a difference in surface rates of twenty-five 
percent and a six degree step command, the maximum error would 
be approximately 1.25 degrees. This would cause a nuisance 
trip in the aileron or elevator servosystems . Such an 
asymmetric load would be likely only for antisymmetrically mov- 
ing surfaces. 

The loop gain and rate limit analysis results may be summar- 
ized as follows . For each percent difference in loop gain (re- 
presenting a static error) or rate limit (representing an error 
due to asymmetric loading), an error of approximately 0.9 de- 
grees will be contributed with each second the surfaces are 
commanded at the maximum rate. Whichever factor is larger 
should determine the error contribution. 

The error contribution due to differences in the threshold 
non-linearity (shown in figure 16a) is insignificant for dif- 
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ferences of as much as 500 percent. Hysteresis differences of 
as much as 300 percent were also shown to have a negligible con- 
tribution to the error (shown in figure 16b) . 

The effect of noise in the system due to the EHSV is shown 
in figures 17a and 17b. This noise could be from the environ- 
ment or it could be thought of as state noise resulting from 
the unmodeled characteristics of the servovalve. The effects 
were attentuated by the actuator. The curve resembles the 
curves for differences in rate limit because in the model the 
noise was added to the EHSV input. This resulted in a larger 
than 4 milliampere input current and thus, a larger control flow. 
Looking at just the amplitude of the error curve gives a more 
realistic view of the effect of noise sources in the EHSV. The 
effect on the error for a three percent addition of random 
white noise appears to be negligible. 

The error contribution from noise introduced at the demodu- 
lator output is shown in figures 18a and 18b. This is a signi- 
ficant problem for the CSCM method because any nonidentical 
signals introduced at this point directly affects the error 
magnitude. This has already been illustrated by the problem 
associated with the demodulator ripple. An average difference 
in the demodulator outputs of 3.0 percent due to system noise 
results in an error that approaches 2.0 degrees. Filtering of 
the demodulator output will attenuate the high frequency noise 
but a compromise would have to be made in choosing the cut-off 
frequency. The actual position information could not be atten- 
uated which would result in selection of a filter cut-off fre- 
quency that would not attenuate low frequencies. The extent 
of the noise problem would most effectively be determined by 
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actual measurements on the vehicle servosystems . 

The combined effects are shown in figures 18a-18d. The de- 
modulator noise overshadowed the error contributions from other 
sources. The error contributions in the physical system will 
not always be additive as was the case in these tests. This 
set of tests was a worst-case situation which used a range of 
differences that could be expected in the servosystems . The 
elevator and aileron servosystems with nominal computer thres- 
hold limits of 0.69 and 0.65 degrees, respectively, would be 
likely to cause a nuisance trip under the conditions of test 
case 1 or 2 . The two canard servosystems could be very unlike- 
ly to cause a nuisance trip in any of the cases because of the 
wide buffer band created by a computer threshold limit of ap- 
proximately 3.65 degrees. 

The effect of the demodulator ripple voltage was analyzed 
previously for the symmetrically and antisymmetrically deflect- 
ed surfaces. The two test cases are shown in figures 19a and 
19b, respectively, for a sampled, rate-limited command of six 
degrees 1 The sampled command input does not appear to have a 
significant effect on the servosystem or the error value. The 
error magnitude for symmetrically moving surfaces, approximate- 
ly 0.1 degrees, would be of some concern in the case of the 
elevators because of the small threshold limit and the result- 
ing small buffer band. In the case of the antisymmetrically 
moving surfaces , the error magnitude of approximately 1 . 0 de- 
grees would be critical for the ailerons since it exceeds the 
computer threshold limit. The nearly 25 percent decrease 
in the width of the canard buffer band would be undesirable 
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although it would be unlikely to cause a nuisance trip in itself. 
As mentioned earlier, filtering the demodulator output will re- 
duce the ripple voltage error. 

The modeling of the CSCM method might have been more precise 
had the higher-order dynamics and other possible non-linearities 
been included. The most probable servosystem variations in 
characteristics were not known which resulted in somewhat 
arbitrary choices for the ranges used in the computer analysis. 
The trends of the sensitivities to various differences, how- • 
ever, were clear. The probable effect of system noise was dem- 
onstrated but the choice of the magnitude was arbitrary. The 
amount of noise in the servosystems would best be determined by 
measurement of the physical system. The computer analysis re- 
sults could then be used to approximate the error magnitude-. 

The expected error contribution from each- error source is .sum- 
marized in table 6. 

CONCLUDING REMARKS 

The investiagtion of the cross-ship comparison monitoring 
(CSCM) method of failure detection revealed several problems 
associated with the technique. The selection of the appropriate 
computer threshold limit involves a trade-off between the pos- 
sibility of a nuisance trip and the assurance that an actual 
failure will be detected in time. 

There are several error sources which, if decreased or elim- 
inated, would lessen the likelihood of a nuisance trip. These 
possible errors, due to differences between corresponding right 
and left servosystems for the canard, aileron, and elevator con- 
trol surfaces, are as listed: 
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ERROR SOURCES 

APPROXIMATE ERROR 
CONTRIBUTION 

AMOUNTS OF 
DIFFERENCE BETWEEN 
SERVOSYSTEMS 

Loop gain or 
rate limit 

0 . 9 deg/second at 
maximum surface 
rate 

1% 

Threshold 

7 x 10 “ 5 deg 

1% 

Hysteresis 

2.6 x 10 ^ deg 

1% 

EHSV input 
noise 

2 x 10 “ 3 deg 

1% 

Ripple voltage 
for symmetrically 
deflected 

0.02 deg/ deg of 
deflection 

0% 


surfaces 


Ripple voltage 
for anti- 
s ymme tr i ca 1 ly 
deflected 
surfaces 


0.14 deg/deg of 
deflection 


0 % 


TABLE 6 

SUMMARY OF ERROR SOURCES AND THE RELATIVE CONTRIBUTIONS FOR 
A 1% DIFFERENCE BETWEEN SERVOS YSTEMS 
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o 


Ripple voltage on the demodulator output. 

o . Electrical noise on the demodulator output. 

o Asymmetric loading of the antisymmetrically moving 
control surfaces. 

o Nonidentical loop gains. 

The ripple voltage and electrical noise on the demodulator 
output signal could be attenuated by filtering the demodulator 
output. The low-frequency noise would still be present, how- 
ever. 

The problem due to asymmetric loading of the antisymmetrical- 
ly moving surfaces could be a severe problem and should be ana- 
lyzed further. 

Nonidentical loop gains may be adjusted by changing the gain 
of the feedback amplifiers. Sufficient differences in the hy- 
draulic components may require replacing the EHSV and servoactu- 
ator in one servosystem. 

The likelihood of a nuisance trip may also be decreased by 
increasing the computer threshold limit. Decreasing the trans- 
fer delay time by using a faster switching relay for the lock 
up solenoid would allow a larger computer threshold limit to 
be selected. The selection of the computer threshold limit de- 
pends on the anticipated error rate. The error rate could be 
greater than or less than the maximum surface rate. The error 
rate, to some extent, depends on the commanded surface rate at 
the time of the failure. Therefore, the threshold limit should 
be chosen with the recognition that the error rate is dependent 
on the flight condition at the time of failure. 
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PROGRAM LISTING 
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7 3 /74 OPr=l 


FTN 4, ?• 75060 


05/11/7“' 12.11.00 


PAGE 


i 


'•"4 


5 


10 


15 


20 


25 


30 


35 


40 


45 


50 


55 


£4**4 44 4* 4**44* *44 444 4444*44. «.(<««. 4*. *4*4. 4**¥***4444*it4*4*4**4*******4**4 4* 4* 
Q»**4 ******* *» * .4 44 4* 4 4*44* « 444 4444* 4 44*4 4 4* #44*4 *»*»»**» *4 4* 4* 4 *4* 4* 4*4*44*4 4*4 

C 

C CRCSSHIP COMPARE REDUNDANCY MANAGEMENT MOO Eu 3F A TVr F f! SEI-VO- 
C SYSTEM L OOF 1 GAINS ARE TAKEN FPCM UPOATFO MR INF 0'>Ki\T ION » 

C A BILINEAR TRANSFORM IS US FD EOF THF IMPLEMENTATION OF THE I NT F- 
C GRATOR WITH ADDITIONAL NON LIHFA FIT ICi CALL ED AS SUBROUTINES . THE 
C OUTPUTS TAKEN FROM THE DEMODULA TOPS ARE DIFFERENCED AND THE ERROR 

C IS GIVEN IN TERMS OF THE DIFFERENCE IN CUR FACE POSITION IOEGPEES1. 

C J. WOLP 10/77 

C 

£44*4 »» 44444*44*4444***4*444 4* 44444»4»444 4* 4*4**4444**44.444*4 *4 4»*4* 4*4*444 4* 4* 
0444441444444444444444444444444*4.4444*444444*444444444444* 4444444444444*44444444 

c 

c 

C THIS IS THE INITIALIZATION FOPTION. THE GAIN 

C VALUES WILL BE PSAO, INITIAL CONDITIONS SET 

C ANQ H P A LINGS PRINTED. 

C 

C 

PROGRAM JXCC (INPUT .OUTPUT ,T APf 1=INPUT« TAPE30UT PUT.T APE A, T APE6J 
C 

REAL LVOT 

REAL LVDOlfT 12) .LVO TIN ( 21 . ACT 1(21 
C 

DIMENSION AMP (2) . EHSV ( 2) t ACT (2 1 . L VO T( 2 I . DEMOD { 2 I , FEED (21 

C III ELS I Oil AMPIN (2 1 .AMPOUT <zi ,e isvincei , eh sdut I21 ,actin(2> . actout( 2 
*>,ACTINO(2),FEEDIN(21,F00UTt?l , OEMOOI ( 2) , OEMOOO ( 2 1 . YYOUT < 2 ) 

C 

COMMON TI('E.NFTS,THSPEC(2>,RLSFEC(2),HYS = EC(2),NCASFS 
C 


c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 


WRIT E ( 3> 201 

20 FORMAT (1H1 *////20 X #*CROSS HI P COMPARE Rf DUNOANC Y MANAGEMENT OF THE 
•TYPE “0" SERVOSYSTEK’./AOX.'J, HDLF 10/77'///! 


IF THE HO. OF POINTS IS GREAT FP THAN ROD 
THE COMMAND IS A 6.0 DEC^EF STEP INPUT. IF 
THE NO. C- POINTS IS EQUAL TO LOO THE INPUT 
IS A II KE HAVE OF AMPLITUDE ECUALING 5.0 
DFGREES AND FREfl'JENCY OF 5.0 Hf.RT7. IF THE 
NO. CF 'FOINTS rs LESS THAN 400 THE COMMAND 
IS A WHITF NOISE SIGNAL OF 7FPO MEAN AND 
STANOARC DEVIATION OF 1,0 DECREE. 


C 

C FIRST DATA CARD GIVES THE NO. OF CAFES (151 

C 


PFAOll.B INCASES 
9 FORMAT (151 

1RITE(3. 991NCASES 

99 FORMAT(//10X,«T.HE NO. OF CAFFS IS«,I5//1 


O o 

V g 

rs 2 

o ^ 

Sfe 


o 

% 


I 

g 


8 ® 


c 


DO 112 K =1 .NCASES 



PROGRAM JXCC 73 / 7 t* 0=5 = 1 


FT'I 2 H 5060 05/1 1/70 1 Z. 11 . 00 . 


■'J 

U) 


60 


65 


70 


75 


SO 


05 


90 


95 


100 


105 


110 


C 

C 


C 

C 

C 

C 


c 


c 

c 

c 

c 

c 


G 


c 


c 


c 


c 

c 

c 

c 

c 

c 

c 


c 


c 

c 


c 


HFAnjNG I 


WRITCl Z,28)K 

28 FORMAT I//20X, ’CASE MO. *,12,//) 

THF SAMPLE RATE O c r HE SERVOS VST EM I? RE AO 
AND ALSO 7 HE MO. 3 F OATA POINTS, 

FEAO < i, 11 ) SSR A TE, NPT Q 
11 F OF MAT (F 0 , 3 , 2 X,I 5 ) 

WRIT£T3,39)SSRATS»NPTS 

29 FORMATt/ 10 X,*THE SAMPLE R A T E IE*,F 9 . 3 ,* HZ*// 1 0 X , *1 HE NG. OF SAMPL 
♦ES EQUALS*, 19 //) 


SFRVOSVSTEH GAINS ARE READ F n OM THE THIPO 
OATA CA AO IN A CASE. F 10.9 FORMAT 


DO 100 1=1,2 
WRITE! 1,21)1 

-21 FORMATf/ZOX,* SEPV0SY3T EM *,I1,* GAINS*,/) 

HRITE (3, 22) 

22 FORMAT ti OX, *AMPIIFIE°* ,1 2X, *f.HSV* »15X, * A3 TJATOR* ,11X ,*LVOT*,l 5X, 

** DEMODULATOR* , 7X, *FEED BAC K* ) 

HRITE13, 222) 

222 FORMAT llOX," MA/I/DC " , 12X, ••IN3/SEC-MA“, 9 X, “ IN-2 " , 1 1X,*‘VAG/IN" 
* t> 13X, N VOC/VAC ".7X,” H A/VOC”//) 

R£ADIl»10)AKP(I) ,EHSV (I)iACT(I)»LVDT(I)»OENO!MI),FEFOtII 
10 F ORMAT (6 (FiC, 9 )) 

WRITEU.ZSIAMPm.EHSVU) ,ACT(I),LVOTm,OFMOO 1I),FFF0(I) 

23"FORMAT (10X,6(F8.9,11X)//) 

OEADOAHO, PAT'E limit, AND HYSTERESIS VALUES 
ARE INPUT AS PERCENTAGES OF ACTUATOR FULL 
STROKE SPECIFICATIONS* WITH THE DEADBAND 
SPECIFICATION IT IS WITH F.ESFECT TO MAXIMUM 
SERVOVALVE INPUT S PE CIFI CAT IONS ( +/- 9HA). 

PEADtl,7lO)TFSP£C(I) .RLSPECU) ,HYSPEC(I> 

710 FORM A 1 (3 {F10.7I1 

THSPEC(I) = HYSPEC1I) / A. '6.969*20. 

HPITL (2, 713) 

713 FORMATTIOX, ‘HYSTERESIS AHO DRA CBANO ARE GIVEN AS P rc C£NT OF FULL 
♦STROKE. PATE LIMIT IS GIVEN AS PE a CENT OF 90 DEG/SF C.*/// ) 


HRITE (3, 7illI,TNSPEC(I),RLSPfC(I) .HYSPfCt I) 

711 FCPNAniOX, *10CP*, IX, II, //19*. ‘THRESHOLD VALUE =* , 0 9 X, F 10. 7,/lOX, * 
♦RATE LIMIT =*,9X*F10.7 ./10X**HYSTE9ESIS VA.UE =♦ , 37 , F10 . 7, //) 

100 CONTINUE 


PAGE 2 


ORIGINAL PAGE IS 
OF POOR QUALITY' 
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-4 

or 


115 


120 


125 


130 


135 

140 


145 


150 


155 


1 GO 


165 


170 


C 

c 

c 

c 


c 


c 

c 

c 

c 

c 

c 


c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 


c 

c 

c 

c 


L1P.H.C AFP CHOSfN T) 3FSGfiI>F INF. VARIAOLF. 
INITIAL 17ATICN CF VARIABLES AND INITIAL 
CONDITIONS APF SET-JP. 


PFRIOO = 1.0/SSRATE 
’ ERROR = C.O 
I GNT = 0 
WIN =0. 0 
TIME = 0.0 

OO 101 1 = 1.2 
AHPINtl! =0.0 
AMPOUT(I1=0.0 
EMSVIRJI 1=0.0 
EKSOUKIl =0.0 
ACTINtll =0.0 
ACTOUT (I l = C.O 
LVOTIN (11 = 0.0 

uvoourii 1=0.0 

F EEGI M 1 1 =0. 0 
FOOUT(I) =0.0 

oemoohi) = o.o 

DEMOOOtl I =0.0 
VYOUT(I) =0.0 

• ACTINF IS THE PREVIOUS ACTUATOR INPUT ANO 

ACT1 IS THE PREVIOUS ACTUATOP OUTFUT, THIS 
SET OF VARIABLES IS FOP THE BIUNFAR TRANS- 
FORM OF THE INTEGRATOR. 

ACTINPI II = 0.0 
ACT1U1 = 0. 

101 CONTINUE 

THERE ART TWO SERVOSYSTEM LOCFS IM THIS 
HOOEL. LOOP 1 FEORESENTS A FIGHT AILERON 
OR CANAFO, LOOP 2 REPRESENTS THE LEFT. ALL 
CHANGES in thf ffr visystem charactefistics 
ARE 0 FPFO D MED ON THE RIGHT C U FF ACE WITH THE 
LEFT ACTING AS A REFERENCE OR CONTROL. 


ALTHOUGH IH= SIGNAL IN THF PHYSICAL SYSTEM 
IS TNVFRTFO AT THF LVDT OEMPO LLATCR THE 
HOOEL OCES NOT INVERT THE SIGNAL UNTIL THF 
SUMMING JUNCTION TO PRGVIOE A CLEAR PLOT 
PRESENTATION. 

WRITE (3. 251 

25 FOR HA T ( /12X. # TIME* ,10X» ♦COMMA NO I NPUT» , 1 OX, * EF.POP OU 7FUT* , 15X ,»LOO 
*P l».12X,*LOOP H*»/10X.*(SFGI*.13X«* { PEG > *,14X,» (CEO ) *,13X, 

♦* tCEG) *,BX,* (OFG) ♦// ) 

USIi'G THt SUBROUTINE INPUT A COMMA NO INPUT 
IS F-fcTEFATE’’. 

CALL INPLT(YYIN) 



PROGRAM JXCC 73/74 _ 0RT=1 


F T N 4. ’♦75060 05/1 1 774 12.11.00. 


-J 

-4 


175 


ISO 


1 55 


140 


145 


200 


205 


210 


215 


220 


225 


111 WRITE (3, 261TIME,YYIN,ERR0F, VVnLT 1 1) ,YYCUT (21 
26 FORMAT! 1 OX ,F10. 6, 4 X, F 1 0.4 ,11V, £13.6, «X , EL 3. 4. 6X , El N . £1 

OUTPUT FILE FOR PLOT ROUTTW 

HRTTt U) TIME, YYIN « ERPOP.Y YOUT ( 11 , YYOUT (2t 


I CUT = TOUT F 1 
I FdCNT. EO.KPT51 GO TO 112 

TIME = TIME ♦ PERIOD 

CALL IMP IT (YY IN) 


1 = 1 


TM IS IS LOOP 1 r.K HE RIGHT CONTROL SURFACE 


ALL FLOCKS ARE HEATED AS P'lF £ GAINS 
EXCFFT FOR THE ACTUATOR CLOCK. 


SINCE THE INPUT IS GIVEN AS CEGREES THE 
VALUF IS DIVIDED 5Y TWO SINCE FOR A *20 DE- 
GREE COMMAND A tiff VOLTS SIGML MUST CE 
APPLIED. 


AHFIMI) = YYIM/2. 

A HPOUTI 1 1 = AMP ( II * AMPINdl 

EHSVIMII = AMPDJTTI1 - FOGUTdl 


CALL THRESH (I , EH S V IN I 


THRESH IS THE SimROJTIHF FOP MOOELING A 
OEAOOAMC DR TH= c SHOLO NONLINEARITY. IN THE 
CLOSED LOOP RESPONSE DEADPA^O GIVES THE 
HYSTEPFfjs NONLINEARITY. 


T H FS c TWO L I N r S LIHIT THF FHSV INPUT CUPRENT 


IFtEHSVI Mil. LE.-4 .0 1EHSV IN (Tl = -MO 
IFIEHS\IMII.GE.4.0IEHSVINCI) = 4.0 

EHSOUT(I) = EH5 V (I I * EHSVINIIl 
ACTIN(I) = FHSOUT(I) 


ACTOUTdl = ACT 1 (II 


ACTUATOC IS MODELED as an integrator 

* ACTTMII * ACT(I> * FTRICD / 2,0 
♦ ACTINFdl * ACTIII 1 PPFI'JC / 3.0 

THE RATE LIMIT E'JSROUTIHF LIMITS THE RAM 
MOVEMENT TO 2.112 IN.VSFC. A<~ SPECIFIED. 


CALtl RLIMITd.ACTOUT, ACT1 , J r R I COI 


O O 

* B 

O 

o a 
o ? 
a g 

%i 

§a 

3 S 3 
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<1 

03 


230 


265 


270 


275 


260 


THETE the LINES ARE THE POSITION LIMITS F0° 
THE ACTUATOR. 


C 

C 


c 

c 


IFIACTOUT(I>.GE,, 503)ACTOUT(I> = ,503 



(4 

IFIACTCUTIIl.LE.-. 501) 

ACTOUTII I = -.50 3 

235 

w 

LVOTINd) = 

ACTOUTII) 



LVOOUTII 1 = LV3TIII 

* LVOTIN (I) 

. 


OEMOOIII) ^ 

LV001IT II ) 



D EMO CCII) = DEMOOII) 

* ni-Mmm 

240 

o 

c 


The supface position according to the oemod 


c 


ULATGR OUTPUT IS GIVEN IN OlGPEfcS FOR PLOT 


c 


CLARITY BUT ALSO TO SIMULATE VMAT THE ON- 


c 


BOARD COMPUTER MIGHT 3E SEEING WITH RESPECT 


c 


TO NOISE. 

245 

c 




c 

YYOUTII) = 1 

DEMO n Q II ) ♦ 35. 7?) 7 OEMOD (I) * LVOTCII) 


V 

FEEDINIII * 

dem onoin 



F COUTH) = FEED I II * 

FEEniMi) 

250 

c 





ACTINPI I) * 

ACT IN II) 


c 

ACTl(I) = ACTOUTII) 


'255 

c 

c 


THIS IS LOOP 2 OR TIE LEFT CONTROL SURFACE 


c 

1 = 2’ 




AMFIMI) = YYIN/2. 



AMPOUTII) a AMP 1 1) • 

AMPTNII) 

260 

c 




EHSVINII! = AMPOUKI) - FDOUTII) 
CALL THRESHII.EHSVIN) 

IF(£KSVIMI)»LE.-4.0)EHSVINIT) a -4.0 
IFIEHSVIMI>.GE.4.0)FHSVINd) = 4.0 

EHSOUT(I) = EM3VII) * EHSVIN II) 
ACTINII) = FHSOUTIII 


AC TIIATOP IS MODELED AS AM INTEGRATOR 


ACTOUKI) = 

» 

CALL RLIMITII, ACTOUT, ACT 1 , PFPICP) 


ACTOUKI) t ACTTNd ) * ACT d I * PERIOD / 2.0 
♦ ACT IN F II ) * ACTIII * PFRIOE / 2.0 


IFIACTOIJT d> .GE..50TI ACTOUT (I I = .603 
IFIACTCUTIIl.LE.-. 501) ACTOUTII) = -.503 

LVDTINII) = ACTOUT d ) 
LVOOUTII) = LOOT (I I • LVDTIN (II 
OFMOOId) = LVDOI'T 1 1 ) 
CEMODCd) = OEMOOII1 * OEM Oil ( 1 1 


285 


VYOUT (I) 


IOFMOTOII1 » 10,72)7 I0EMO 0(11 * LVDT d ) I 
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LO 


200 


295 


300 


305 


310 


0 


c 


c 

c 

c 

c 

c 

c 

c 

c 


FEFPiNtn = ne'in'.om 

FOOUTCtl = FEEOIII * FEFr'Itm 

actinpiii = act mm 
ACTKI) = ACTOUT(I) 

TH C niFFRENC r IN THE THP MONITOR OUTPUTS 
IS OALOLLATEO ANO PRINTED A "ERROR. - 

ERROR = VYCUT (1) - YYOUTI21 

GO TO 111 


CALL TO PLOT =>0UTINE 


112 CONTINUE 
P.EWINC A 

DO 723 K N = l.NCASES 
CALL SCPJBL(KH) 

723 CONTINUE 
REMIND A 

CALL FLOKO.,0 ..999> 

REMIND 6 

STOP 

END 


O O 

M W 

hi Q 

O O 

o 6 
* 6 

p g 

3s 
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FTN 4, 2475060 
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SUBROUTINE THRESH ( J, VALUE ( 

0 IMENSION VALUE t 2 ) I 

COMMON TIHE.NFTS. - THSP£C(2 >»RLSFEC(2!,HYS®EC{2> .NCASrS 

ST 03 E THE SIGN 

IFtVALlEUl.LT.O.OlZ = -1.0 
IFtVALUF t J J.GE.Q. 0 >Z = +1.0 
0EA0 = A 8S (VALUE t J t) 

EIGHT HA IS THE FUL. STROVE THING OF THE 
EHSV INPUT, 

SPEC? = 4. ♦ THSPEC(J) 

THE OEACPANO IS ADDED OR SUPT FACT60 FROM 
THE EH?v INPUT. 

I F ( DEAD • GE .SPECS! V ALUE ( J! = VALUStJ) -<Z * S a EC?) 

20 IF(DEAC.LT,SPECS)VALUE(J> = 0.0 

C 


00 

O 


RETURN 

END 



oonooo 


SUBROUTINE RLIHIT, 73/7t» 0PT = 1 


FIN 4. 2 ^ 750 60 


05/11/7A lH.il. 17, 


PAGE 1 


SUOROUTIFE RL IMI T 1 1* OUT t OU1 1 . D rRl 

DIMENSION CUT (2 ) * OUTl ( 21 

COMMON TIME,NFTS.THS®EC(H) .PLSTEC tZI 

BY COMPARING THE SPECIFIED KATE LIMIT OF 
2.312 IN. /SEC. to THE DELTA POSITION IN ONE 
PERIOD A L A°GER VALUE IS nECf EASED TO THE 
SPECIFIED 


10 


15 


SPECS = 2.312 * RLSPECtlf 
GG = (OUTU> - 0JTl(in/P£R 
77 = 1. 

ifigg.lt .o.n> zz = -l.o 

IF ( { A ES t GG)) .GT. SPECS) OUT ( 1 1 = SPECS* ZZ*PER*OUTl (I) 

RETURN 

ENO 


CD 

H 




SUBROUTINE INPtT 73/71. QPT=1 


FTN A.P47506G 


05/11/70 12.11.25. 


PAGE 1 


CO 

(O 


5 


10 


15 


•20 


25 


C 

C 

C 

,C 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 


c 


SUBROUTINE INPUT (V AUUE t 


THIS IT THF SUBROUTINE FOR ’HR COMMAND INPUT 


COMMON TINE.NPTS 


I F (NPTS. GT .4 0 0 ) i/M. UE = 6. 

RANDOM NOISE .ZERO MEAN AND STANDARD DEVIA- 
TION OF 1.0. 

.IFtNPTS.LT.AQOtVALUE = GPANOtO) 

XFUIPTS.EO.AOOIGO TO 2 
GO TO 3 


SINE NAVE OF 5.0 OEJREES , 5.0 HZ. 

2 THETA = TIKE * 6.20316 * .25 

VALUE = SIN (THETA ) » .06’ 

3 CONTINUE 
RETURN 
ENO 



SUBROUTINE ANOISf 73/7A CPT=1 


FIN <.,?f75060 05/11/7R 12,11.11. 


PAGE 1 


S 


10 


15 


C 

c 

c 

c 

c 

c 

c 

c 

c 


SUBROUTINE A NOISE ( OP , N ,< , MX I 
PEAL MX 

DIMENSION 0P<2I,VALUF(2I 

COMMON T IME.NFTS,THSPFC(2 ),RLSFE012 I ,KYS=ES< 21 .NCASFS 

GRAUO IE 0 WHITE NOISE GENERATOR CF ZERO 
MEAN A UNITY STANDARD DEVIATION 

VALUE(N» = GRANDtO* 

THE NOISE LEVEL IS GIVEN AS A PERCENT OF 
HA XI HUH SIGNAL LEVS'. AT THE POINT OF INTER- 
EST. THIS MUST BE PROVIDED BY THE USER. 

BPIN) = VALUE (N) * .001 • MX ♦ BPIN1 

RETURN 

END 


cn 

U) 




FUNCTION GRAND 73/74 OPT=l 


FTN 4.2,75060 05/11/7! 12,11.30. 


CO 

>fc» 


FUNCTION GKANCtNI 



C 



GRAND 


Ci • 

WRITTEN 0/22/75 A MYERS . N A SA/FRC 

GRliND 


C.. 

.. ADAPTED GY J BROWNLOH FROM 


GRAND 

5 

C 



GRAND 


c 

COMM OF^THE ACM At GOR IT FM 

486 

GRAND 


c 

DECIDER 147 4 


GRAND 


c 

VCL 17 NO. 12 


GRAND 

0 

c 

•'PAGE., 704 


GRAND 

10 

c 

. -£j 


GRANO 


c 

ROUTINE' RETURNS 3 SEU90 RANDOM NUMBER WITH 

GRAND 


c 

A GAU'SIAN DISTRIBUTION WPH ZERO 

MEAN A 

GRANO 


c 

STANDARD DEVIATION OF UNITY 


GP AND 


c 



GRAND 

15 

c 

NOT El USES'RANF TO SUPPLY UNIFORH 

PSEUDO 

GRAND 


c 

RANDOM NUMBER WITH UNIFORM 

DISTRIBUTION 

GRANO 


c 

OVER THE RANGE 0 TO 1.0 


GRANO 


0 



GRANO 


c 

NOTE! REQUIRES ONE INITIALIZATION 

CALL 

GRANO 

ZO 

c 



GRAND 


c 

NOTE 1 N IS A DUMMY ARGUMENT 


GRANO 


c 



GRANO 



DIMENSION C(4R| 


GRANO 



COMMON /GRANDS/ U 


GRANO 

25 


DATA. 0/>, . 67448975 0. , 475859630, 

.383771164, ,326611323, 

GRANO 



. - '.29114Z8Z7, . 2636843ZZ, 

,242506452, ,225567444, 

GRANO 



«• . 211 634166, . 194524267, 

.189910758, . 181225181, 

GRANO 



. ‘ • .17360140 0, , 16664190 0, 

. 160 7°67 79 , . 15 5349 517, 

GRA NO 



.' .150409364, . 14599 257 7, 

. 1417700 33, .137963174, 

GRAND 

30 


. .134441762, , 131172 150, 

,128125965, . 125279090, 

GRANO 



. . 12261086 3, , 120 10 3560, 

.117741707, . 11=511 692 - , 

GP.ANC 



. .113402349, ,111402720, 

.109503852, .10 7697617, 

GRANO 



. ,105976772, . 104334641, 

.102766012, . 101265052, 

GRAND 



. * C9962723 4, . 096446262, 

. 097124309, . 095851 776, 

GRAM) 

35 


. .094627461, . 093446407, 

. 092311909, . 091215482, 

GPAND 



. . 090155638, . 089133667, 

.088144619, . 087187293/ 

GRANO 



A=0,0 


GRA NO 



1=0 


GRANO 



1 CONTINUE 


GRANO 

AO 


U=U+U 


GRAND 



IFIU.LT.I.QIGO TO 2 


GRAND 



U=U-1.0 


GRAND 



I = IU 


GRANC 



A = A-om 


GRA IO 

45 


GO TO 1 


GRANO 



2 CONTINUE 


GRANO 



H = D (1*1 l«U 


GRAND 



V=W* (0. 5«W-AI 


GRANO 



3 CCN1I HUE 


GPAND 

50 


U=PA IF(0) 


GRANO 



IFtv.LE.UlGO TO 4 


GPAND 



V=RANF(0I 


GRANO 



IFtU.GT. VIGO TO 3 


GRANO 



U=(V-U)/ (1.0-UI 


GRAND 

55 


GO TO 2 


GRANO 



4 CONTINUE 


GRAND 



U=<U-V»/ (1.0- VI 


GRANO 
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FUNCTION GRAND 73/7li' OPT=l 


F T N A ■ ?♦ 750 60 


05/ll/7<) 12.11. JO.. 


U=U*U 

IF(U.LT. 1.0) GO T3 
U=U-L.O 
GRAN!) = t-A 
RETURN 
5 CONTINUE 
GRAN0 = A-1I 


GRAND 

GRAND 

GRAND 

GPANO 

GRAND 

GRAND 

GRAND 


PAGE 



SUBROUTINE SCRIRL 73/74 0=1=1 


FTN 4.2«-7506C 


05/11/7B 12.11.20. 


PAGE 1 


C»' 

(Xl 


5 


10 


15 


•20 


25 


30 


35 


40 


45 


50 


55 


C 


c 

c 

c 

c 

c 


c 

c 

c 

c 


c 

c 

c 

c 


c 

c 

c 

c 

c 

c 


SUBP<)UTIKF e CPIBL(K> 

CCHMOK TIMF,NFTS,THS = EC(?I ,°IEFE:: (?) ,HYSPED(2) . MCA ,F G 

REAL 3UF (2040 ) ,T(1 000) ,OD»TA(l COO) ,YI1 000 l.LPl (lOOl 1 ) ,LP2tl 000 > 

CIKEMSION NIT LE ( 4 ) .STORE (5C > ,S (40 0) ,3S (60 0). SSS (400 > , TT 1600) 

CALL PLOTSIDUF, 2040.fi) 

CALL FACTOR (2 .0/2 . 54) 

CALL PLOT ( 2* « 2, ,.r 3 I 

DATA NITLE/10HTI4E HISTO, 10HFY ,?rc ,10H CAFF NC.10H 
V 


THIS '•IJEFOUTINE P.OTS THE COMMAND INPUT, 
THE LFFT AND RIGHT SURFACE PC VFMEHTS AND 
THE ERROR GET KEEN HE THO VERSUS T I HE. 


ENCQOE (10,1, NHL E(4))K 
1 FOPHAT ( ZX »I2» 6X) 

SET VARIABLES FOR ILLUSTRATING THE SAMPLED 
OATA EFFECT 

IJ * 1 
II = 1 
S (IJ) = 0. 

SS(IJ) = 0. 

SSS(IJ) = 0, 

TTtIJI = 0. 

00 777 J = l.NPTS 

READ(4)T(J),Y(J),DDATA ( Jl ,L F 1 (J) , LP 2t J I 

A SAMPLE AROUND THE APPROPRIATE SAMFLE TIME 
IS TAPFN ANO HELD TILL THE NEXT SAMFLE TIME 

IF(T(J).LT.((1./53.3)*II))G0 TO 777 
11= 1 1*1 
IJ = IJ *■ 2 
S1IJI = DDATA(J) 

S (IJ-1) = StIJ-2) 

SS(IJ) = LFltJ) 

SS(IJ-l) = SS ( I J-2 ) 

SSStlJ) = LPJtJ) 

SSS 1IJ-1I = SSS(IJ-2) 

TT(IJ) = T!J) 

TT(I J-U = T ( J-t) 

777 CONTINUE 

THE CATA IS SCALED. SINCF A SCALE FACTOR OF 
EIGHT IS UNDESIRABLE IF IT SHCULC APPEAR 
THE EIGHT SUBROUTINE CHANGE! THE SCALE 
FACTCP TO TEN. 

CALL SCALE(DDATA,2.0,NPTS,1) 

CALL El GFT < DO ATA, N PT S > 

CALL SCALE IT, 7.0.NFTS, t> 

CALL EIGHT IT, NFTS) 

CALL SCALE(Y,2.0,NPTS,1> 

CALL EIGHTIY.NPTS) 



ORIGINAL PAX38 1$ 
QE POOR QUALITY] 


SUBROUTINE SCRI«L 73/7 A 0PT=1 


FfN ii. ? *■ 7506C 05/11/79 12,11,20. 


00 

-J 


60 


65 


70 


75 


80 


65 


90 


' 95 


100 


105 


110 . 


C 

c 

c 

c 

c 


c 

c 

c 


c 

c 

c 

c 


c 

c 

c 

c 

c 

c 

c 

c 

c 

c 


c 
• c 
c 

c 

c 

c 

G 

c 

c 

c 

c 


C ALL SCALE(L»1,2.0 ,NPTS,1) 

CALL SCALE(LF2,2.0,N»TS,1> 

CALL EIGHT (LP2,NFTS1 

THE SCALE FACTORS AMD STARTING VALUES FOR 
THE SAMFLFO FOI NTS ARE TRANSFERRED TO THE 
RESPECTIVE ARRAYS. 

TT( I J *1 ) = T<NPT»*1> 

TTtI J + 2) = T ( NPT3 f 2) 

SUJ+11 = CDATAINpTSU) 

S H J *21 = CDATA {NPTS *2 I 
SStIJ+l> = LPltN»TS*l> 

SS!IJf2) = LP1(NPTS*2> 

SSSIIJM) = LP2INPTSH) 

SSS (I J*2 » * LP2(NPTS*2> 


TI HE AXIS 

CALL AXIS (0. ,CO.,NITLE,-AO,7.0,O..T<NPTSUI.T(NPTS*2>I 
CALL PLOT (Q.t 7 .5.-3) 


ERROR AXIS ' 

CALL AX9 0 (0,,0., "ERROR, DEG *12 , Z, 0,9 0. . DO ATA {HP TS + 11 , OOATA INF 

♦TS«-2H 


ERROR PLOT 


CALL LIN£(T,OOATA, NPTS, 1, 0,01 

CALL LINE(TT,S,IJ,t,0,01 SAMPLE RATE EFFFCT 

CALL PLOT {0., -2. 5,-31 . • 

COMMAND AXIS 

CALL AX 90 ( 0, , 0, , "COMM ANO , DEG *1 3. 2 .0, 90 . , V {NPTS* 11 , YtNPTSAZM 


COMMAND PLOT 


CALL LINE (T, Yi NPTS, 1 , 0,01 
CALL PLOTLO.,-2.5, -31 


RIGHT SURFACE AXIS 

CALL AX90 { 0, , 0. ,“RT,DEG‘\ «6,2. C, 9 0. ,LP1(M PTS * 11 , LP1 (NPTS *2 > » 
RIGHT SLRFACE PLOT 
CALL LINE (T»LP1 , NPTS, 1 * 0, 01 

CALL LINE(TT,SS,IJ, 1,0,0) SAMPLE RATE EFFFCT 

CALL PLOT (0., -2.5, -3) 

LEFT FIIFFACE AXIS 

CALL AX90 1 0, i'0« » "LT* DEG", *6, 2. 0,90. ,L°'2 (N PTS *1 1 , LP2{ HPT S *2 > ) 
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SUBROUTINE SCRI n L 73/74. 0*1=1 


Fit! 4. 2*75060 


05/15/78 12.11.20. 


PR GE 3 


CO 

00 


115 


120 


125 


130 

135 


140 


145 


0 

c 

c 

c 

c 

c 

c 


c 

0 

c 


L rc * Su-FACF "LOT 

CALL LINE(T,L>P2,VPTS, 1,0,0) 

CALL LINF t TT, SSS, I J, 1,0,0) SAMplf RATE EFFECT 

CALL SCA LE (D0ATA.2 .Q.NOTS ,1 ) 

CODF T 0 ARRANGE SCALE FACTORS FOR A CUMULA- 
TIVE FLCT OF THE ERROR DATA OF ALL CASES 

STORE tK> = OOATAtNPTEM) 

CALL SCA IE (00 AT A, 2 ,0 ,N PTS ,- 1) 

STORE (K* 2) = DDAT A (NPTS)l ) 

IFtK. )E.NCASES)GO TO 5 

CALL SCA if (STORE, g ,S i NCASES*2, 1) 

CALL EIF.t-T ( STORE, ( NC AS ES* 2) ) 

ODATAINPTSU) = STORE t NCA SCS*2 *1) 

COAT A (NP TS *2 ) = STOR F t NCA SES*? *2) 

CALL PLOT (12, ,0.,-3) 

CALL AX9 0 (0, , 0«, “SECONDS" ,-7,7 . 0, 0 . ,T TNPT SH) , T UIPTS *21 ) 

CALL AX90 <0., 0. ."ERROR OUTPUT ALL CASES, DE3", ♦ 26, 09. 5 , 9 0. , ODATA (NP 
*TS*1) ,0 OAT A (NPTS*2 ) > 

REWINt 4 

ALL CASES PLOT 


DO 7 L = l.NCASES 
DO 8 N = l.NPTS 

READ(4)T(M, YIN) ,0 DATA (N) ,LP1 1 N) , LP2(N ) 
5 CONTINUE 

CALL LINE (7, DDAT A, NPTS « 1, 0,0) 

7 CONTINUE 

5 CALL PLOT <12., -2., -31 
RFTURN 
END 



SUBROUTINE EIGHT 7T/74 OPT = i 


FTN 4.3475060 05/11/ 7 f 13.11.30. 


CO 

lO 


10 


15 



SUDROUTIIsE EIGHT! OAT, NPTS1 
DIMENSION CAT (1000 1 
C 

C TH F SCA If FACTOR OF OAT ARRAY DIMENSIONED 

C NPTS TOINTS IS CHECCED TO SFE IF IT IS A 

C FACTOR OF EIGHT (MIGHT BE 8,00, OR 800 ETC.l 

C THEN CHANGE IT TO 10, 100, .1 , ETC. 

C 

Z = 1. 

IF (OAT (HPT 543 I .LT, 0.>Z = -1. 

D = ALOG10(ABS(DATU( P TS*21) ( 

£ = ALOG10 (fl, 1 
' CC = 0-INT(01 
C 

I F (AGS (CC-E),GT.,0 01.ANO.ABS(CC- <E- 1, It . GT . . 00 1 1 RETURN 

c 

IF (CC.IT .0.)O= I NT (D ) ♦ 0 . 

C 

IF(CC.GT.0,)O= I NT (0 1 ♦ 1. 

OAT ( NETS 43 ) = (10.**O)»Z 

RETURN 

ENO 


P O 

^ S 

gP 

S 


§ 


i 

o 


Y ™ 1 

L< & 
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CONVERSION FACTORS TO SI UNITS 


To correct from- 

To- 

Multiply by 

psi 

N/m 2 

6894.76 

in 

m 

0.0254 

. -2 
m 

m“ 2 

1550.15 

Vac/ in 

Vac/m 

39.37 

deg/ in 

deg/m 

39.37 

in 3 /sec-mA 

m 3 /sec-mA 

1 . 639xl0 -5 

in/sec 

m/sec 

0.0254 


90 

C-X- 



1. Report No. 2. Government Accession No. 

' NASA CR-144879 

3. Recipient's Catalog No. 

4. Title and Subtitle 

INVESTIGATION OF THE CROSS-SHIP COMPARISON 
MONITORING METHOD OF FAILURE DETECTION IN THE 
HiMAT RPRV 

5. Reoort Date 

December 1978 

6. Performing Organization Code 

7. Author(s) 

James A. Wolf 

8. Performing Organization Report No 

10. Work Unit No. 

9 Performing Organization Name and Address 

University of Kansas Center for Research 
2291 Irving Dr . 

Lawrence, Kansas 66044 

11. Contract or Grant No. 
NSG-4012 

13. Type of Report and Period Covered 
Contractor Report - Topical 

12. Sponsoring Agency Name and Address 

National Aeronautics and Space Administration 
Washington , D .C . 20546 

14. Sponsoring Agency Code 
H-1078 

1 15. Supplementary Notes * 


NASA Technical Monitor: Dwain A. Deets, Dryden Flight Research Center 


16. Abstract 


The HiMAT RPRV uses cross-ship comparison monitoring of the 
actuator RAM positions to detect a failure in the aileron, canard, and 
elevator control surface servosystems. Some possible sources of nuisance 
trips for this failure detection technique are analyzed. A FORTRAN model 
of the simplex servosystems and the failure detection technique were utilized 
to provide a convenient means of changing parameters and introducing system 
noise. The sensitivity of the technique to differences between servosystems 
and operating conditions was determined . The cross-ship comparison mon- 
itoring method presently appears to be marginal in its capability to detect an 
actual failure and to withstand nuisance trips. Several suggestions are given 
to alleviate potential problems. The LVDT demodulator outputs should be 
filtered. to attenuate the ripple signal and system noise . Each set of servosystems 
should be set as closely as possible to the same loop gain. A higher sample 
rate along with a faster switching relay would allow a larger failure threshold 
value to be used. 


17. Key Words (Suggested by Author(s)) 
Failure identification 
HiMAT 

Research aircraft 
Digital flight control 
Microprocessors 


18. Distribution Statement 
Unclassified 

- Unlimited 

STAR Category: 05 

19. Security Classif (of this report) 

20. Security Classif. (of this page) 

21. No. of Pages 

22. Price* 

Unclassified 

Unclassified 

100 

$4.75 


♦For sale by the National Technical Information Service, Springfield, Virginia 22161 













